$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa File: a34a1cd9-a6e1-4f90-a908-a66252462eae.roa (raw, json) Hash identifier: HjE5xklXCbAQyzcsnVe4ltEX0HPRkaeozqTJABs2010= Subject key identifier: 1B:9D:A5:6D:87:1F:4E:31:56:BA:74:90:74:79:D9:09:D1:78:8D:7A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6C491AD1F657C9653E0ED119989D2051EF192D6B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa Signing time: Tue 06 May 2025 00:40:31 +0000 ROA not before: Tue 06 May 2025 00:40:31 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:49:1a:d1:f6:57:c9:65:3e:0e:d1:19:98:9d:20:51:ef:19:2d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:40:31 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=1533f8c52fb8a45d028d88c3dbfe1f9352494bfb47218dee2dc882d9c30fcd45, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6e:b9:29:56:1f:3c:73:0b:ed:fd:ef:e2:49: e0:01:95:7f:7d:13:97:d1:de:99:7e:4d:e7:e4:20: bf:31:59:87:b3:81:89:ef:d7:d1:bb:94:30:44:9b: 83:9a:b4:4f:73:d7:ea:34:ad:83:60:68:b5:6a:cf: ae:07:0c:de:37:ab:b7:44:e3:32:71:62:54:00:73: 74:f4:e4:8c:e3:fb:f2:91:b5:6f:5f:c8:17:55:42: ca:4a:be:3f:05:fb:68:86:8b:96:af:4d:0b:0b:5c: d2:a0:ef:60:54:c6:39:bd:66:01:50:7a:5d:ea:b4: 7d:11:21:75:43:b3:67:c3:ea:4f:b7:17:7f:ce:2d: 24:97:16:32:1c:8e:fb:95:83:a7:8b:d7:ca:4d:0b: 18:14:05:13:cc:4d:c1:d0:19:32:38:ec:5e:7e:8e: c3:88:a3:a4:f4:2f:88:b3:66:15:72:1c:f3:ab:71: df:b8:4b:dc:54:87:20:e3:c1:a0:fc:29:44:ca:07: 5b:70:1f:97:23:13:50:7b:53:1b:0f:0f:c0:ee:c0: 47:a3:d2:d6:c9:f8:e6:57:e1:ec:e7:48:42:ef:5f: 26:a5:37:af:49:43:28:77:e1:4e:45:d0:54:48:7d: b5:05:07:20:54:5b:ba:8c:58:69:46:50:ce:9b:25: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9D:A5:6D:87:1F:4E:31:56:BA:74:90:74:79:D9:09:D1:78:8D:7A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c15::/48 Signature Algorithm: sha256WithRSAEncryption 5e:f6:e7:78:ad:4a:de:7b:d5:1d:94:b5:2f:e9:68:b4:59:d0: 06:3f:06:34:5f:f7:81:61:0f:32:a9:10:c3:d7:d0:b1:a1:eb: 0f:91:58:3f:59:96:44:27:ed:1b:9c:3a:d9:88:32:62:b8:fc: c8:40:63:58:d1:8f:f3:d8:7c:86:95:95:c2:fe:e0:3d:c7:18: 03:dd:46:0f:d7:89:73:3e:ba:3b:5f:fb:6a:12:80:33:83:8a: 6c:dd:1c:3b:bd:ed:11:4a:1e:c0:3c:49:aa:e3:10:9f:74:bf: 59:2b:be:e0:37:ae:86:ce:1a:50:58:36:94:43:21:5b:df:e6: 04:da:40:d7:14:b0:8c:26:ee:12:f8:63:17:df:79:d9:74:e4: 9c:0f:2f:b0:1f:e8:62:1c:87:fc:10:a7:8c:7a:15:95:a6:55: ba:b7:d5:36:de:84:69:5a:99:2b:81:6f:5f:75:7d:eb:52:12: 38:69:85:42:94:a0:4f:b6:68:8c:dd:49:63:1a:2c:9d:ad:c4: 76:31:02:d4:34:16:72:d7:a1:ba:69:70:77:0e:f9:08:90:f3: aa:13:48:8e:73:ba:52:68:1b:55:82:90:0f:41:df:f6:af:aa: 58:40:c0:3c:cf:0d:92:3f:2a:0c:f9:82:1b:44:07:59:58:a7: d0:e1:e5:48 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbEka0fZXyWU+DtEZmJ0gUe8ZLWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDA0MDMxWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTMzZjhjNTJmYjhhNDVkMDI4ZDg4YzNkYmZlMWY5MzUy NDk0YmZiNDcyMThkZWUyZGM4ODJkOWMzMGZjZDQ1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDobrkpVh88cwvt/e/iSeABlX99E5fR3pl+TefkIL8xWYez gYnv19G7lDBEm4OatE9z1+o0rYNgaLVqz64HDN43q7dE4zJxYlQAc3T05Izj+/KR tW9fyBdVQspKvj8F+2iGi5avTQsLXNKg72BUxjm9ZgFQel3qtH0RIXVDs2fD6k+3 F3/OLSSXFjIcjvuVg6eL18pNCxgUBRPMTcHQGTI47F5+jsOIo6T0L4izZhVyHPOr cd+4S9xUhyDjwaD8KUTKB1twH5cjE1B7UxsPD8DuwEej0tbJ+OZX4eznSELvXyal N69JQyh34U5F0FRIfbUFByBUW7qMWGlGUM6bJV0PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUG52lbYcfTjFWunSQdHnZCdF4jXowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EzNGExY2Q5LWE2ZTEtNGY5MC1hOTA4LWE2NjI1MjQ2MmVhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBUwDQYJKoZIhvcNAQELBQADggEBAF7253itSt571R2UtS/paLRZ 0AY/BjRf94FhDzKpEMPX0LGh6w+RWD9ZlkQn7RucOtmIMmK4/MhAY1jRj/PYfIaV lcL+4D3HGAPdRg/XiXM+ujtf+2oSgDODimzdHDu97RFKHsA8SarjEJ90v1krvuA3 robOGlBYNpRDIVvf5gTaQNcUsIwm7hL4Yxffedl05JwPL7Af6GIch/wQp4x6FZWm Vbq31TbehGlamSuBb191fetSEjhphUKUoE+2aIzdSWMaLJ2txHYxAtQ0FnLXobpp cHcO+QiQ86oTSI5zulJoG1WCkA9B3/avqlhAwDzPDZI/Kgz5ghtEB1lYp9Dh5Ug= -----END CERTIFICATE-----Generated at Tue May 6 06:59:11 2025 by rpki-client